Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/6vjObNdZ4ZDyeBK7FoLaSNysOo8.roa
File: 6vjObNdZ4ZDyeBK7FoLaSNysOo8.roa (raw, json)
Hash identifier: sQSSzzP+BZxRWbH+mpQqhAyrA6LOOIrF7Suw401AY9Q=
Subject key identifier: EA:F8:CE:6C:D7:59:E1:90:F2:78:12:BB:16:82:DA:48:DC:AC:3A:8F
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 01919F8DC3F646CFBBE0A27B3B578803DF62
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/6vjObNdZ4ZDyeBK7FoLaSNysOo8.roa
Signing time: Thu 29 Aug 2024 19:12:33 +0000
ROA not before: Thu 29 Aug 2024 19:12:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128
Validation: Failed, certificate revoked on Thu 29 Aug 2024 20:05:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:9f:8d:c3:f6:46:cf:bb:e0:a2:7b:3b:57:88:03:df:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Aug 29 19:12:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=eaf8ce6cd759e190f27812bb1682da48dcac3a8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c8:8c:c9:21:42:40:c1:db:40:19:47:0c:94:
ab:1d:39:67:5b:7a:c8:e6:f7:94:7b:21:e0:a2:d1:
58:3b:99:c7:c7:07:ea:8a:36:49:6a:6b:61:83:e1:
65:94:e2:b3:2d:75:ec:c2:6a:e2:a8:e0:dc:82:22:
3b:45:ae:91:99:dd:97:73:f8:05:c8:f6:af:88:81:
ed:6c:5d:0b:3d:46:6a:81:0c:b6:91:ef:e2:8b:8c:
09:f0:d2:40:6f:29:76:05:e0:f4:b4:37:e3:b5:be:
f4:73:ca:35:c6:f2:b2:5d:e5:f3:14:8f:18:ac:73:
ee:e2:44:33:73:d3:40:17:af:68:e2:92:2a:93:0f:
7c:a3:80:44:65:ed:9e:a2:36:61:7f:28:25:6e:eb:
6b:b6:5a:a8:9c:29:cd:6b:1c:43:e5:f4:f5:b9:1d:
43:5e:e6:1b:6b:b9:8e:75:c3:3a:3a:c3:15:bc:8a:
fb:84:39:98:36:ec:38:58:0a:70:1e:8c:4e:2d:e0:
0a:09:c6:5a:a8:a1:8a:3e:41:c5:51:85:cf:3b:89:
53:01:6b:ea:9d:bf:7f:20:fb:3e:67:8a:05:ec:2b:
a7:35:8b:dc:37:c4:ae:29:be:16:12:ad:f6:2e:e0:
e5:b5:46:6e:43:a8:57:d5:31:59:8a:3e:7e:29:79:
aa:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:F8:CE:6C:D7:59:E1:90:F2:78:12:BB:16:82:DA:48:DC:AC:3A:8F
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/6vjObNdZ4ZDyeBK7FoLaSNysOo8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:190:fdf2:f302/128
Signature Algorithm: sha256WithRSAEncryption
3e:b4:e2:03:b0:46:9d:0c:1f:ea:db:5b:93:21:d9:fd:30:b0:
d3:d6:81:22:76:2f:f5:99:88:a7:db:47:1c:28:ca:ff:79:c4:
3e:5c:0b:f2:12:db:c1:b8:ac:1f:a9:6c:d0:7c:be:a4:32:4d:
86:a3:f9:8e:e4:16:0e:16:46:51:8c:43:47:63:48:af:e2:70:
21:df:ec:d4:c4:8f:b6:4c:37:f7:0a:b6:02:53:c4:58:d5:8c:
40:1f:f6:41:f9:0d:c9:9f:a3:8c:22:c7:8e:61:7e:ce:a3:22:
85:44:2f:2e:48:1f:45:27:36:be:f2:97:7c:51:ae:9c:51:6f:
ed:89:8f:cc:1b:8c:22:9d:30:1e:27:24:83:bf:11:a7:56:d8:
a4:3e:f8:e2:61:f8:a4:d9:a1:02:81:f0:25:af:4a:9c:0c:c6:
23:3d:4c:04:7f:41:ea:98:ac:46:80:a0:e7:37:19:38:dd:d3:
03:f4:cf:b9:01:33:19:49:3a:a4:37:8c:a5:8e:e1:0d:e9:15:
2c:c1:da:7e:47:42:aa:97:c9:a7:da:b0:29:d2:6a:84:f7:df:
ef:28:cd:43:01:2f:5e:64:e0:d9:8e:c5:fe:bf:5b:0b:81:cd:
d8:5d:f1:db:ff:3e:75:b0:a3:d0:8b:38:d7:39:7f:a0:07:f0:
c1:5d:cd:82
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:50:54 2025 by rpki-client